ansible-playbook [core 2.16.19] config file = None configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/local/lib/python3.12/site-packages/ansible ansible collection location = /tmp/collections-svG executable location = /usr/local/bin/ansible-playbook python version = 3.12.1 (main, Feb 21 2024, 14:18:26) [GCC 8.5.0 20210514 (Red Hat 8.5.0-21)] (/usr/bin/python3.12) jinja version = 3.1.6 libyaml = True No config file found; using defaults running playbook inside collection fedora.linux_system_roles Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'jsonl', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: tests_ipsets.yml ***************************************************** 1 plays in /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml PLAY [Test firewall user defined ipsets] *************************************** TASK [Gathering Facts] ********************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:27:07 -0400 (0:00:00.027) 0:00:00.027 **** ok: [managed-node2] TASK [Start from clean slate] ************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:36 Thursday 10 September 2026 16:27:08 -0400 (0:00:01.020) 0:00:01.047 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:27:08 -0400 (0:00:00.017) 0:00:01.065 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:27:08 -0400 (0:00:00.000) 0:00:01.066 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:27:08 -0400 (0:00:00.015) 0:00:01.081 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:27:08 -0400 (0:00:00.067) 0:00:01.148 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:27:08 -0400 (0:00:00.011) 0:00:01.159 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:27:08 -0400 (0:00:00.017) 0:00:01.177 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:27:08 -0400 (0:00:00.488) 0:00:01.665 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:09-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:27:09 -0400 (0:00:00.470) 0:00:02.135 **** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:27:09 -0400 (0:00:00.451) 0:00:02.587 **** ok: [managed-node2] => { "ansible_facts": { "__firewall_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:27:09 -0400 (0:00:00.023) 0:00:02.611 **** ok: [managed-node2] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:27:09 -0400 (0:00:00.289) 0:00:02.900 **** ok: [managed-node2] => { "ansible_facts": { "__firewall_is_transactional": false }, "changed": false } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:27:09 -0400 (0:00:00.019) 0:00:02.919 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:27:09 -0400 (0:00:00.027) 0:00:02.947 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:27:09 -0400 (0:00:00.020) 0:00:02.968 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:27:10 -0400 (0:00:00.023) 0:00:02.991 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "previous": "replaced" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:27:10 -0400 (0:00:00.029) 0:00:03.021 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:27:10 -0400 (0:00:00.018) 0:00:03.040 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:27:10 -0400 (0:00:00.024) 0:00:03.064 **** ok: [managed-node2] => { "changed": false, "cmd": [ "systemctl", "is-system-running" ], "delta": "0:00:00.006555", "end": "2026-09-10 16:27:10.462167", "failed_when_result": false, "rc": 0, "start": "2026-09-10 16:27:10.455612" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:27:10 -0400 (0:00:00.410) 0:00:03.475 **** skipping: [managed-node2] => { "changed": false, "false_condition": "\"No such file or directory\" in __is_system_running.msg | d(\"\")", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:27:10 -0400 (0:00:00.017) 0:00:03.493 **** ok: [managed-node2] => { "ansible_facts": { "__firewall_is_booted": true }, "changed": false } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:27:10 -0400 (0:00:00.020) 0:00:03.513 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:27:13 -0400 (0:00:02.776) 0:00:06.290 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:27:13 -0400 (0:00:00.015) 0:00:06.305 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:27:13 -0400 (0:00:00.015) 0:00:06.321 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:27:13 -0400 (0:00:00.011) 0:00:06.332 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:27:13 -0400 (0:00:00.024) 0:00:06.356 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:27:13 -0400 (0:00:00.022) 0:00:06.379 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48082944", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:27:14 -0400 (0:00:00.626) 0:00:07.006 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48082944", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:27:14 -0400 (0:00:00.425) 0:00:07.432 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.229319", "end": "2026-09-10 16:27:14.938338", "rc": 0, "start": "2026-09-10 16:27:14.709019" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:27:14 -0400 (0:00:00.520) 0:00:07.952 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:27:16 -0400 (0:00:01.424) 0:00:09.377 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:27:16 -0400 (0:00:00.016) 0:00:09.394 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:27:16 -0400 (0:00:00.013) 0:00:09.408 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:27:16 -0400 (0:00:00.012) 0:00:09.420 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:27:16 -0400 (0:00:00.023) 0:00:09.444 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:27:16 -0400 (0:00:00.025) 0:00:09.469 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:16-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Check for customipset-ipv4 and ipv6 ipsets] ****************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:44 Thursday 10 September 2026 16:27:16 -0400 (0:00:00.292) 0:00:09.761 **** ok: [managed-node2] => { "changed": false, "cmd": [ "firewall-offline-cmd", "--get-ipsets" ], "delta": "0:00:00.234520", "end": "2026-09-10 16:27:17.285590", "failed_when_result": false, "rc": 0, "start": "2026-09-10 16:27:17.051070" } TASK [Define new ipsets] ******************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:52 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.537) 0:00:10.299 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.017) 0:00:10.316 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.000) 0:00:10.317 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.014) 0:00:10.331 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.029) 0:00:10.361 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.012) 0:00:10.374 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.020) 0:00:10.394 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:27:17 -0400 (0:00:00.504) 0:00:10.899 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:18-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.289) 0:00:11.188 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.015) 0:00:11.204 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.014) 0:00:11.218 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.014) 0:00:11.233 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.014) 0:00:11.247 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.026) 0:00:11.274 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.018) 0:00:11.292 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.025) 0:00:11.318 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv4", "ipset_entries": [ "127.0.0.1", "8.8.8.8" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.043) 0:00:11.361 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.018) 0:00:11.380 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.022) 0:00:11.402 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.015) 0:00:11.418 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.013) 0:00:11.431 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:27:18 -0400 (0:00:00.013) 0:00:11.445 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:27:21 -0400 (0:00:02.588) 0:00:14.033 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:27:21 -0400 (0:00:00.013) 0:00:14.046 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:27:21 -0400 (0:00:00.012) 0:00:14.059 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:27:21 -0400 (0:00:00.011) 0:00:14.071 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:27:21 -0400 (0:00:00.021) 0:00:14.092 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:27:21 -0400 (0:00:00.023) 0:00:14.116 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48136192", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:27:21 -0400 (0:00:00.428) 0:00:14.544 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48136192", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:27:22 -0400 (0:00:00.429) 0:00:14.973 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.241727", "end": "2026-09-10 16:27:22.494189", "rc": 0, "start": "2026-09-10 16:27:22.252462" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:27:22 -0400 (0:00:00.534) 0:00:15.508 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:27:24 -0400 (0:00:02.232) 0:00:17.740 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:27:24 -0400 (0:00:00.013) 0:00:17.753 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:27:24 -0400 (0:00:00.014) 0:00:17.768 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:27:24 -0400 (0:00:00.011) 0:00:17.780 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:27:24 -0400 (0:00:00.025) 0:00:17.805 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:27:24 -0400 (0:00:00.025) 0:00:17.831 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:25-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if ipsets not added] ************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:57 Thursday 10 September 2026 16:27:25 -0400 (0:00:00.324) 0:00:18.156 **** ok: [managed-node2] => { "changed": false, "cmd": [ "firewall-offline-cmd", "--get-ipsets" ], "delta": "0:00:00.232855", "end": "2026-09-10 16:27:25.667072", "failed_when_result": false, "rc": 0, "start": "2026-09-10 16:27:25.434217" } STDOUT: customipset-ipv4 customipset-ipv6 TASK [Fail if entry not added to ipset] **************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:63 Thursday 10 September 2026 16:27:25 -0400 (0:00:00.536) 0:00:18.692 **** ok: [managed-node2] => (item={'name': 'customipset-ipv4', 'entry': '8.8.8.8'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--query-entry", "8.8.8.8" ], "delta": "0:00:00.234605", "end": "2026-09-10 16:27:26.237218", "item": { "entry": "8.8.8.8", "name": "customipset-ipv4" }, "rc": 0, "start": "2026-09-10 16:27:26.002613" } STDOUT: yes ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8844'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8844" ], "delta": "0:00:00.236752", "end": "2026-09-10 16:27:26.775870", "item": { "entry": "2001:4860:4860::8844", "name": "customipset-ipv6" }, "rc": 0, "start": "2026-09-10 16:27:26.539118" } STDOUT: yes ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8888'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8888" ], "delta": "0:00:00.235436", "end": "2026-09-10 16:27:27.302926", "item": { "entry": "2001:4860:4860::8888", "name": "customipset-ipv6" }, "rc": 0, "start": "2026-09-10 16:27:27.067490" } STDOUT: yes TASK [Fail if options not added to ipset] ************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:74 Thursday 10 September 2026 16:27:27 -0400 (0:00:01.630) 0:00:20.323 **** ok: [managed-node2] => (item={'name': 'customipset-ipv4', 'option1': 'hashsize=120', 'option2': 'maxelem=1000'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.232038", "end": "2026-09-10 16:27:27.869330", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option1": "hashsize=120", "option2": "maxelem=1000" }, "rc": 0, "start": "2026-09-10 16:27:27.637292" } STDOUT: customipset-ipv4 type: hash:ip options: hashsize=120 maxelem=1000 entries: 127.0.0.1 8.8.8.8 ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'option1': 'hashsize=120', 'option2': 'maxelem=1000'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.233520", "end": "2026-09-10 16:27:28.393195", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option1": "hashsize=120", "option2": "maxelem=1000" }, "rc": 0, "start": "2026-09-10 16:27:28.159675" } STDOUT: customipset-ipv6 type: hash:ip options: hashsize=120 maxelem=1000 family=inet6 entries: 2001:4860:4860::8844 2001:4860:4860::8888 TASK [Redefine new ipsets] ***************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:87 Thursday 10 September 2026 16:27:28 -0400 (0:00:01.084) 0:00:21.407 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:27:28 -0400 (0:00:00.019) 0:00:21.427 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:27:28 -0400 (0:00:00.000) 0:00:21.428 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:27:28 -0400 (0:00:00.014) 0:00:21.442 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:27:28 -0400 (0:00:00.030) 0:00:21.472 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:27:28 -0400 (0:00:00.011) 0:00:21.484 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:27:28 -0400 (0:00:00.017) 0:00:21.502 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.483) 0:00:21.985 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:29-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.290) 0:00:22.276 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.015) 0:00:22.292 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.014) 0:00:22.307 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.014) 0:00:22.322 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.014) 0:00:22.337 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.027) 0:00:22.365 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.019) 0:00:22.384 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.024) 0:00:22.409 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv4", "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv6", "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "short": "Custom", "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.040) 0:00:22.450 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.019) 0:00:22.469 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.023) 0:00:22.492 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.017) 0:00:22.509 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.014) 0:00:22.524 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:27:29 -0400 (0:00:00.015) 0:00:22.539 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:27:32 -0400 (0:00:02.611) 0:00:25.151 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:27:32 -0400 (0:00:00.017) 0:00:25.169 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:27:32 -0400 (0:00:00.012) 0:00:25.182 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:27:32 -0400 (0:00:00.012) 0:00:25.195 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:27:32 -0400 (0:00:00.029) 0:00:25.224 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:27:32 -0400 (0:00:00.026) 0:00:25.250 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48279552", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:27:32 -0400 (0:00:00.428) 0:00:25.679 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48279552", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:27:33 -0400 (0:00:00.427) 0:00:26.107 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231690", "end": "2026-09-10 16:27:33.619229", "rc": 0, "start": "2026-09-10 16:27:33.387539" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:27:33 -0400 (0:00:00.526) 0:00:26.633 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.896) 0:00:27.530 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.019) 0:00:27.550 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.022) 0:00:27.572 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.013) 0:00:27.586 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.026) 0:00:27.613 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.027) 0:00:27.640 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:34-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if defining ipset not idempotent] *********************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:106 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.294) 0:00:27.934 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is changed", "skip_reason": "Conditional result was False" } TASK [Redefine new ipsets with previous replaced] ****************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:111 Thursday 10 September 2026 16:27:34 -0400 (0:00:00.021) 0:00:27.956 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.033) 0:00:27.989 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.001) 0:00:27.991 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.032) 0:00:28.023 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.046) 0:00:28.070 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.015) 0:00:28.085 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.020) 0:00:28.105 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.494) 0:00:28.599 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:35-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.297) 0:00:28.897 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.025) 0:00:28.923 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.025) 0:00:28.948 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:27:35 -0400 (0:00:00.022) 0:00:28.970 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.022) 0:00:28.992 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.046) 0:00:29.039 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.044) 0:00:29.084 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.043) 0:00:29.127 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv4", "ipset_entries": [ "127.0.0.1", "8.8.8.8" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes", "ipset": "customipset-ipv6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "hashsize": 120, "maxelem": 1000 }, "ipset_type": "hash:ip", "short": "Custom", "state": "present" } } MSG: All assertions passed ok: [managed-node2] => (item=2) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 2, "item": { "previous": "replaced" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.091) 0:00:29.219 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.028) 0:00:29.247 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.040) 0:00:29.288 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.026) 0:00:29.314 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.021) 0:00:29.336 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:27:36 -0400 (0:00:00.022) 0:00:29.359 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:27:38 -0400 (0:00:02.607) 0:00:31.966 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:27:39 -0400 (0:00:00.013) 0:00:31.980 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:27:39 -0400 (0:00:00.012) 0:00:31.992 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:27:39 -0400 (0:00:00.012) 0:00:32.004 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:27:39 -0400 (0:00:00.022) 0:00:32.027 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:27:39 -0400 (0:00:00.023) 0:00:32.050 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48168960", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:27:39 -0400 (0:00:00.430) 0:00:32.480 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48168960", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:27:39 -0400 (0:00:00.423) 0:00:32.904 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231533", "end": "2026-09-10 16:27:40.415134", "rc": 0, "start": "2026-09-10 16:27:40.183601" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:27:40 -0400 (0:00:00.524) 0:00:33.429 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.896) 0:00:34.326 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.013) 0:00:34.340 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.014) 0:00:34.355 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.012) 0:00:34.367 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.025) 0:00:34.392 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.024) 0:00:34.417 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:41-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if defining ipset not idempotent with previous replaced] ************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:116 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.298) 0:00:34.716 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is changed", "skip_reason": "Conditional result was False" } TASK [Modify ipset options] **************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:122 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.021) 0:00:34.738 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.042) 0:00:34.781 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.001) 0:00:34.782 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.022) 0:00:34.805 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.040) 0:00:34.845 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.015) 0:00:34.860 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:27:41 -0400 (0:00:00.017) 0:00:34.878 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.493) 0:00:35.371 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:42-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.301) 0:00:35.673 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.016) 0:00:35.689 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.015) 0:00:35.704 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.015) 0:00:35.719 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.014) 0:00:35.734 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.030) 0:00:35.764 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.023) 0:00:35.788 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.032) 0:00:35.820 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "ipset_options": { "hashsize": 240 }, "state": "present" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "ipset_options": { "hashsize": 240 }, "state": "present" } } MSG: All assertions passed ok: [managed-node2] => (item=2) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 2, "item": { "ipset": "customipset-ipv4", "ipset_options": { "maxelem": null }, "state": "absent" } } MSG: All assertions passed ok: [managed-node2] => (item=3) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 3, "item": { "ipset": "customipset-ipv6", "ipset_options": { "maxelem": null }, "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.069) 0:00:35.890 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.025) 0:00:35.916 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.026) 0:00:35.942 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:27:42 -0400 (0:00:00.016) 0:00:35.959 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:27:43 -0400 (0:00:00.014) 0:00:35.974 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:27:43 -0400 (0:00:00.014) 0:00:35.988 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:27:45 -0400 (0:00:02.599) 0:00:38.588 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:27:45 -0400 (0:00:00.014) 0:00:38.602 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:27:45 -0400 (0:00:00.012) 0:00:38.614 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:27:45 -0400 (0:00:00.012) 0:00:38.627 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:27:45 -0400 (0:00:00.022) 0:00:38.649 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:27:45 -0400 (0:00:00.024) 0:00:38.674 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48168960", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:27:46 -0400 (0:00:00.428) 0:00:39.102 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48168960", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:27:46 -0400 (0:00:00.434) 0:00:39.537 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.230089", "end": "2026-09-10 16:27:47.049608", "rc": 0, "start": "2026-09-10 16:27:46.819519" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:27:47 -0400 (0:00:00.526) 0:00:40.063 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:27:50 -0400 (0:00:03.177) 0:00:43.241 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:27:50 -0400 (0:00:00.024) 0:00:43.266 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:27:50 -0400 (0:00:00.036) 0:00:43.302 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:27:50 -0400 (0:00:00.020) 0:00:43.323 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:27:50 -0400 (0:00:00.037) 0:00:43.360 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:27:50 -0400 (0:00:00.036) 0:00:43.396 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:50-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if options not modified in ipset] *********************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:144 Thursday 10 September 2026 16:27:50 -0400 (0:00:00.315) 0:00:43.712 **** ok: [managed-node2] => (item={'name': 'customipset-ipv4', 'option': 'hashsize=240'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.234720", "end": "2026-09-10 16:27:51.230504", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option": "hashsize=240" }, "rc": 0, "start": "2026-09-10 16:27:50.995784" } STDOUT: customipset-ipv4 type: hash:ip options: hashsize=240 entries: 127.0.0.1 8.8.8.8 ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'option': 'hashsize=240'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.235122", "end": "2026-09-10 16:27:51.752117", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option": "hashsize=240" }, "rc": 0, "start": "2026-09-10 16:27:51.516995" } STDOUT: customipset-ipv6 type: hash:ip options: family=inet6 hashsize=240 entries: 2001:4860:4860::8844 2001:4860:4860::8888 TASK [Fail if options not removed from ipset] ********************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:156 Thursday 10 September 2026 16:27:51 -0400 (0:00:01.053) 0:00:44.766 **** ok: [managed-node2] => (item={'name': 'customipset-ipv4', 'option': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.232272", "end": "2026-09-10 16:27:52.280082", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option": "maxelem=" }, "rc": 0, "start": "2026-09-10 16:27:52.047810" } STDOUT: customipset-ipv4 type: hash:ip options: hashsize=240 entries: 127.0.0.1 8.8.8.8 ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'option': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.232331", "end": "2026-09-10 16:27:52.801732", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option": "maxelem=" }, "rc": 0, "start": "2026-09-10 16:27:52.569401" } STDOUT: customipset-ipv6 type: hash:ip options: family=inet6 hashsize=240 entries: 2001:4860:4860::8844 2001:4860:4860::8888 TASK [Remove entries and options from ipset] *********************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:168 Thursday 10 September 2026 16:27:52 -0400 (0:00:01.049) 0:00:45.815 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:27:52 -0400 (0:00:00.023) 0:00:45.839 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:27:52 -0400 (0:00:00.000) 0:00:45.840 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:27:52 -0400 (0:00:00.015) 0:00:45.855 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:27:52 -0400 (0:00:00.029) 0:00:45.884 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:27:52 -0400 (0:00:00.011) 0:00:45.896 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:27:52 -0400 (0:00:00.017) 0:00:45.914 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.490) 0:00:46.404 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:27:53-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.305) 0:00:46.710 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.016) 0:00:46.727 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.015) 0:00:46.743 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.015) 0:00:46.758 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.015) 0:00:46.773 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.027) 0:00:46.801 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.018) 0:00:46.820 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.025) 0:00:46.845 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "ipset_entries": [ "8.8.8.8", "127.0.0.1" ], "ipset_options": { "hashsize": null, "maxelem": null }, "state": "absent" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "hashsize": null, "maxelem": null }, "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.055) 0:00:46.900 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.026) 0:00:46.927 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:27:53 -0400 (0:00:00.026) 0:00:46.954 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:27:54 -0400 (0:00:00.019) 0:00:46.973 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:27:54 -0400 (0:00:00.017) 0:00:46.991 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:27:54 -0400 (0:00:00.018) 0:00:47.010 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:27:56 -0400 (0:00:02.598) 0:00:49.609 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:27:56 -0400 (0:00:00.021) 0:00:49.630 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:27:56 -0400 (0:00:00.020) 0:00:49.650 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:27:56 -0400 (0:00:00.018) 0:00:49.669 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:27:56 -0400 (0:00:00.036) 0:00:49.706 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:27:56 -0400 (0:00:00.040) 0:00:49.746 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:27:57 -0400 (0:00:00.448) 0:00:50.195 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:27:57 -0400 (0:00:00.429) 0:00:50.624 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.230489", "end": "2026-09-10 16:27:58.164424", "rc": 0, "start": "2026-09-10 16:27:57.933935" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:27:58 -0400 (0:00:00.554) 0:00:51.179 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:00 -0400 (0:00:02.229) 0:00:53.408 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:00 -0400 (0:00:00.014) 0:00:53.423 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:00 -0400 (0:00:00.024) 0:00:53.447 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:00 -0400 (0:00:00.013) 0:00:53.461 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:00 -0400 (0:00:00.025) 0:00:53.487 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:00 -0400 (0:00:00.025) 0:00:53.512 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:00-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if ipsets removed] ************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:189 Thursday 10 September 2026 16:28:00 -0400 (0:00:00.303) 0:00:53.815 **** ok: [managed-node2] => (item=customipset-ipv4) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv4\n", "delta": "0:00:00.241896", "end": "2026-09-10 16:28:01.372378", "item": "customipset-ipv4", "rc": 0, "start": "2026-09-10 16:28:01.130482" } STDOUT: customipset-ipv4 customipset-ipv6 ok: [managed-node2] => (item=customipset-ipv6) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv6\n", "delta": "0:00:00.242531", "end": "2026-09-10 16:28:01.925403", "item": "customipset-ipv6", "rc": 0, "start": "2026-09-10 16:28:01.682872" } STDOUT: customipset-ipv4 customipset-ipv6 TASK [Fail if entry not removed from ipset] ************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:200 Thursday 10 September 2026 16:28:01 -0400 (0:00:01.129) 0:00:54.944 **** ok: [managed-node2] => (item={'name': 'customipset-ipv4', 'entry': '8.8.8.8'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--query-entry", "8.8.8.8" ], "delta": "0:00:00.241617", "end": "2026-09-10 16:28:02.481520", "failed_when_result": false, "item": { "entry": "8.8.8.8", "name": "customipset-ipv4" }, "rc": 1, "start": "2026-09-10 16:28:02.239903" } STDOUT: no MSG: non-zero return code ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8844'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8844" ], "delta": "0:00:00.243055", "end": "2026-09-10 16:28:03.023569", "failed_when_result": false, "item": { "entry": "2001:4860:4860::8844", "name": "customipset-ipv6" }, "rc": 1, "start": "2026-09-10 16:28:02.780514" } STDOUT: no MSG: non-zero return code ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'entry': '2001:4860:4860::8888'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--query-entry", "2001:4860:4860::8888" ], "delta": "0:00:00.240229", "end": "2026-09-10 16:28:03.550492", "failed_when_result": false, "item": { "entry": "2001:4860:4860::8888", "name": "customipset-ipv6" }, "rc": 1, "start": "2026-09-10 16:28:03.310263" } STDOUT: no MSG: non-zero return code TASK [Fail if not all options removed from ipset] ****************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:213 Thursday 10 September 2026 16:28:03 -0400 (0:00:01.630) 0:00:56.575 **** ok: [managed-node2] => (item={'name': 'customipset-ipv4', 'option1': 'hashsize=', 'option2': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv4" ], "delta": "0:00:00.239780", "end": "2026-09-10 16:28:04.117108", "failed_when_result": false, "item": { "name": "customipset-ipv4", "option1": "hashsize=", "option2": "maxelem=" }, "rc": 0, "start": "2026-09-10 16:28:03.877328" } STDOUT: customipset-ipv4 type: hash:ip options: entries: ok: [managed-node2] => (item={'name': 'customipset-ipv6', 'option1': 'hashsize=', 'option2': 'maxelem='}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--info-ipset", "customipset-ipv6" ], "delta": "0:00:00.237814", "end": "2026-09-10 16:28:04.647439", "failed_when_result": false, "item": { "name": "customipset-ipv6", "option1": "hashsize=", "option2": "maxelem=" }, "rc": 0, "start": "2026-09-10 16:28:04.409625" } STDOUT: customipset-ipv6 type: hash:ip options: entries: TASK [Test update short and description] *************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:227 Thursday 10 September 2026 16:28:04 -0400 (0:00:01.088) 0:00:57.663 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:04 -0400 (0:00:00.025) 0:00:57.689 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:04 -0400 (0:00:00.000) 0:00:57.690 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:04 -0400 (0:00:00.015) 0:00:57.705 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:04 -0400 (0:00:00.031) 0:00:57.737 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:04 -0400 (0:00:00.012) 0:00:57.749 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:04 -0400 (0:00:00.017) 0:00:57.767 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.513) 0:00:58.281 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:05-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.293) 0:00:58.574 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.016) 0:00:58.591 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.015) 0:00:58.606 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.015) 0:00:58.622 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.018) 0:00:58.641 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.035) 0:00:58.676 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.021) 0:00:58.697 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.027) 0:00:58.725 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "description": "Custom IPSet for testing purposes (changed)", "ipset": "customipset-ipv4", "runtime": false, "short": "CustomChanged", "state": "present" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "description": "Custom IPSet for testing purposes (changed)", "ipset": "customipset-ipv6", "runtime": false, "short": "CustomChanged", "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.040) 0:00:58.766 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.020) 0:00:58.786 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.023) 0:00:58.809 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.016) 0:00:58.826 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.014) 0:00:58.840 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:05 -0400 (0:00:00.014) 0:00:58.855 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:28:08 -0400 (0:00:02.588) 0:01:01.443 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:28:08 -0400 (0:00:00.014) 0:01:01.458 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:28:08 -0400 (0:00:00.012) 0:01:01.470 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:28:08 -0400 (0:00:00.012) 0:01:01.483 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:28:08 -0400 (0:00:00.022) 0:01:01.506 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:28:08 -0400 (0:00:00.026) 0:01:01.532 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48422912", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:28:08 -0400 (0:00:00.436) 0:01:01.969 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48422912", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:28:09 -0400 (0:00:00.431) 0:01:02.401 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231089", "end": "2026-09-10 16:28:09.910695", "rc": 0, "start": "2026-09-10 16:28:09.679606" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:28:09 -0400 (0:00:00.523) 0:01:02.924 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:12 -0400 (0:00:02.235) 0:01:05.159 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:12 -0400 (0:00:00.018) 0:01:05.178 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:12 -0400 (0:00:00.023) 0:01:05.202 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:12 -0400 (0:00:00.018) 0:01:05.221 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:12 -0400 (0:00:00.037) 0:01:05.258 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:12 -0400 (0:00:00.036) 0:01:05.295 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:12-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Verify changes] ********************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:242 Thursday 10 September 2026 16:28:12 -0400 (0:00:00.295) 0:01:05.591 **** ok: [managed-node2] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv4 --get-description\n', 'expected': 'Custom IPSet for testing purposes (changed)'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--get-description" ], "delta": "0:00:00.233698", "end": "2026-09-10 16:28:13.103973", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv4 --get-description\n", "expected": "Custom IPSet for testing purposes (changed)" }, "rc": 0, "start": "2026-09-10 16:28:12.870275" } STDOUT: Custom IPSet for testing purposes (changed) ok: [managed-node2] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv4 --get-short\n', 'expected': 'CustomChanged'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv4", "--get-short" ], "delta": "0:00:00.232344", "end": "2026-09-10 16:28:13.617077", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv4 --get-short\n", "expected": "CustomChanged" }, "rc": 0, "start": "2026-09-10 16:28:13.384733" } STDOUT: CustomChanged ok: [managed-node2] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv6 --get-description\n', 'expected': 'Custom IPSet for testing purposes (changed)'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--get-description" ], "delta": "0:00:00.235176", "end": "2026-09-10 16:28:14.134099", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv6 --get-description\n", "expected": "Custom IPSet for testing purposes (changed)" }, "rc": 0, "start": "2026-09-10 16:28:13.898923" } STDOUT: Custom IPSet for testing purposes (changed) ok: [managed-node2] => (item={'command': 'firewall-offline-cmd --ipset customipset-ipv6 --get-short\n', 'expected': 'CustomChanged'}) => { "ansible_loop_var": "item", "changed": false, "cmd": [ "firewall-offline-cmd", "--ipset", "customipset-ipv6", "--get-short" ], "delta": "0:00:00.233485", "end": "2026-09-10 16:28:14.654871", "failed_when_result": false, "item": { "command": "firewall-offline-cmd --ipset customipset-ipv6 --get-short\n", "expected": "CustomChanged" }, "rc": 0, "start": "2026-09-10 16:28:14.421386" } STDOUT: CustomChanged TASK [Add ipsets to default zone (runtime)] ************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:262 Thursday 10 September 2026 16:28:14 -0400 (0:00:02.080) 0:01:07.671 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:14 -0400 (0:00:00.056) 0:01:07.728 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:14 -0400 (0:00:00.000) 0:01:07.729 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:14 -0400 (0:00:00.016) 0:01:07.745 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:14 -0400 (0:00:00.032) 0:01:07.777 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:14 -0400 (0:00:00.013) 0:01:07.791 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:14 -0400 (0:00:00.019) 0:01:07.810 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.489) 0:01:08.300 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:15-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.288) 0:01:08.589 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.017) 0:01:08.606 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.016) 0:01:08.622 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.016) 0:01:08.639 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.017) 0:01:08.657 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.036) 0:01:08.693 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.033) 0:01:08.727 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.029) 0:01:08.757 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "permanent": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "permanent": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.048) 0:01:08.805 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.022) 0:01:08.827 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.034) 0:01:08.862 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.019) 0:01:08.881 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.017) 0:01:08.899 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:15 -0400 (0:00:00.015) 0:01:08.915 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:28:18 -0400 (0:00:02.591) 0:01:11.506 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:28:18 -0400 (0:00:00.015) 0:01:11.521 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:28:18 -0400 (0:00:00.013) 0:01:11.534 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:28:18 -0400 (0:00:00.012) 0:01:11.547 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:28:18 -0400 (0:00:00.023) 0:01:11.570 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:28:18 -0400 (0:00:00.025) 0:01:11.596 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48525312", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:28:19 -0400 (0:00:00.427) 0:01:12.023 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48525312", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:28:19 -0400 (0:00:00.427) 0:01:12.450 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.230099", "end": "2026-09-10 16:28:19.962951", "rc": 0, "start": "2026-09-10 16:28:19.732852" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:28:20 -0400 (0:00:00.527) 0:01:12.978 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:21 -0400 (0:00:01.438) 0:01:14.417 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.014) 0:01:14.431 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.015) 0:01:14.447 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.012) 0:01:14.459 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.024) 0:01:14.484 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.023) 0:01:14.508 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:21-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Add ipsets to default zone again (runtime)] ****************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:274 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.294) 0:01:14.802 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.039) 0:01:14.841 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.000) 0:01:14.842 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.015) 0:01:14.858 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.030) 0:01:14.889 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.011) 0:01:14.900 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:21 -0400 (0:00:00.020) 0:01:14.921 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.485) 0:01:15.406 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:22-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.289) 0:01:15.696 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.017) 0:01:15.714 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.016) 0:01:15.731 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.016) 0:01:15.747 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.014) 0:01:15.762 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.027) 0:01:15.790 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.019) 0:01:15.809 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.029) 0:01:15.838 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "permanent": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "permanent": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.043) 0:01:15.882 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.020) 0:01:15.903 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.023) 0:01:15.927 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.016) 0:01:15.944 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:22 -0400 (0:00:00.015) 0:01:15.959 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:23 -0400 (0:00:00.014) 0:01:15.974 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:28:25 -0400 (0:00:02.586) 0:01:18.561 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:28:25 -0400 (0:00:00.014) 0:01:18.575 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:28:25 -0400 (0:00:00.012) 0:01:18.588 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:28:25 -0400 (0:00:00.012) 0:01:18.600 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:28:25 -0400 (0:00:00.023) 0:01:18.623 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:28:25 -0400 (0:00:00.024) 0:01:18.648 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48525312", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:28:26 -0400 (0:00:00.430) 0:01:19.079 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48525312", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:28:26 -0400 (0:00:00.427) 0:01:19.507 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.242795", "end": "2026-09-10 16:28:27.035559", "rc": 0, "start": "2026-09-10 16:28:26.792764" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:28:27 -0400 (0:00:00.542) 0:01:20.049 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:27 -0400 (0:00:00.892) 0:01:20.942 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:27 -0400 (0:00:00.014) 0:01:20.957 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.018) 0:01:20.975 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.012) 0:01:20.987 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.024) 0:01:21.011 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.022) 0:01:21.034 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:28-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if adding ipsets is not idempotent (runtime)] *********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:286 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.291) 0:01:21.325 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is changed", "skip_reason": "Conditional result was False" } TASK [Add ipsets to default zone (permanent)] ********************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:293 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.015) 0:01:21.341 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.029) 0:01:21.370 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.000) 0:01:21.371 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.014) 0:01:21.386 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.030) 0:01:21.416 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.012) 0:01:21.429 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.017) 0:01:21.447 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:28 -0400 (0:00:00.489) 0:01:21.936 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:29-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.292) 0:01:22.229 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.016) 0:01:22.246 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.016) 0:01:22.263 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.016) 0:01:22.279 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.015) 0:01:22.294 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.029) 0:01:22.323 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.020) 0:01:22.343 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.025) 0:01:22.369 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "runtime": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "runtime": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.041) 0:01:22.411 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.020) 0:01:22.431 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.023) 0:01:22.455 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.016) 0:01:22.471 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.016) 0:01:22.488 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:29 -0400 (0:00:00.016) 0:01:22.504 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:28:32 -0400 (0:00:02.590) 0:01:25.095 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:28:32 -0400 (0:00:00.016) 0:01:25.112 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:28:32 -0400 (0:00:00.012) 0:01:25.125 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:28:32 -0400 (0:00:00.015) 0:01:25.140 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:28:32 -0400 (0:00:00.037) 0:01:25.178 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:28:32 -0400 (0:00:00.030) 0:01:25.208 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48525312", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:28:32 -0400 (0:00:00.437) 0:01:25.645 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48525312", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:28:33 -0400 (0:00:00.428) 0:01:26.073 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231774", "end": "2026-09-10 16:28:33.621722", "rc": 0, "start": "2026-09-10 16:28:33.389948" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:28:33 -0400 (0:00:00.571) 0:01:26.645 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:35 -0400 (0:00:01.444) 0:01:28.089 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.013) 0:01:28.103 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.014) 0:01:28.118 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.011) 0:01:28.130 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.023) 0:01:28.154 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.023) 0:01:28.177 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:35-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if adding ipsets reports no changes] ******************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:304 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.293) 0:01:28.471 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is not changed", "skip_reason": "Conditional result was False" } TASK [Add ipsets to default zone again (permanent)] **************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:309 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.015) 0:01:28.486 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.029) 0:01:28.516 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.000) 0:01:28.517 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.014) 0:01:28.532 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.029) 0:01:28.562 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.011) 0:01:28.574 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:35 -0400 (0:00:00.017) 0:01:28.591 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.491) 0:01:29.083 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:36-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.293) 0:01:29.377 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.016) 0:01:29.393 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.015) 0:01:29.409 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.015) 0:01:29.424 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.015) 0:01:29.439 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.028) 0:01:29.467 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.018) 0:01:29.486 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.024) 0:01:29.510 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "runtime": false, "source": "ipset:customipset-ipv4", "state": "enabled" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "runtime": false, "source": "ipset:customipset-ipv6", "state": "enabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.040) 0:01:29.551 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.019) 0:01:29.570 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.023) 0:01:29.593 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.016) 0:01:29.610 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.014) 0:01:29.624 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:36 -0400 (0:00:00.014) 0:01:29.639 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:28:39 -0400 (0:00:02.599) 0:01:32.239 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:28:39 -0400 (0:00:00.013) 0:01:32.253 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:28:39 -0400 (0:00:00.012) 0:01:32.266 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:28:39 -0400 (0:00:00.013) 0:01:32.279 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:28:39 -0400 (0:00:00.022) 0:01:32.302 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:28:39 -0400 (0:00:00.024) 0:01:32.326 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:28:39 -0400 (0:00:00.428) 0:01:32.755 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:28:40 -0400 (0:00:00.428) 0:01:33.184 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.242443", "end": "2026-09-10 16:28:40.708399", "rc": 0, "start": "2026-09-10 16:28:40.465956" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:28:40 -0400 (0:00:00.538) 0:01:33.722 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:41 -0400 (0:00:00.899) 0:01:34.621 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:41 -0400 (0:00:00.014) 0:01:34.636 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:41 -0400 (0:00:00.015) 0:01:34.651 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:41 -0400 (0:00:00.011) 0:01:34.663 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:41 -0400 (0:00:00.023) 0:01:34.686 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:41 -0400 (0:00:00.022) 0:01:34.709 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:41-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if adding ipsets is not idempotent (permanent)] ********************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:320 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.303) 0:01:35.012 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is changed", "skip_reason": "Conditional result was False" } TASK [Remove ipsets from default zone] ***************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:325 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.020) 0:01:35.033 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.052) 0:01:35.086 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.001) 0:01:35.087 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.023) 0:01:35.111 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.053) 0:01:35.164 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.013) 0:01:35.178 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.019) 0:01:35.197 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:42 -0400 (0:00:00.492) 0:01:35.690 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:42-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.291) 0:01:35.981 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.016) 0:01:35.998 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.015) 0:01:36.014 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.014) 0:01:36.029 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.014) 0:01:36.043 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.028) 0:01:36.071 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.019) 0:01:36.090 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.024) 0:01:36.115 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "source": "ipset:customipset-ipv4", "state": "disabled" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "source": "ipset:customipset-ipv6", "state": "disabled" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.041) 0:01:36.156 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.026) 0:01:36.183 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.023) 0:01:36.206 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.016) 0:01:36.223 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.014) 0:01:36.237 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:43 -0400 (0:00:00.014) 0:01:36.252 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:28:45 -0400 (0:00:02.590) 0:01:38.842 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:28:45 -0400 (0:00:00.014) 0:01:38.856 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:28:45 -0400 (0:00:00.012) 0:01:38.869 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:28:45 -0400 (0:00:00.014) 0:01:38.884 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:28:45 -0400 (0:00:00.029) 0:01:38.914 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:28:45 -0400 (0:00:00.035) 0:01:38.949 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:28:46 -0400 (0:00:00.440) 0:01:39.390 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:28:46 -0400 (0:00:00.440) 0:01:39.831 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231977", "end": "2026-09-10 16:28:47.344361", "rc": 0, "start": "2026-09-10 16:28:47.112384" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:28:47 -0400 (0:00:00.527) 0:01:40.359 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:48 -0400 (0:00:01.442) 0:01:41.801 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:48 -0400 (0:00:00.020) 0:01:41.822 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:48 -0400 (0:00:00.023) 0:01:41.845 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:48 -0400 (0:00:00.018) 0:01:41.864 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:48 -0400 (0:00:00.027) 0:01:41.892 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:48 -0400 (0:00:00.025) 0:01:41.917 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:49-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if removing ipsets reports no changes] ****************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:334 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.298) 0:01:42.216 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is not changed", "skip_reason": "Conditional result was False" } TASK [Remove custom ipsets] **************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:339 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.015) 0:01:42.232 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.041) 0:01:42.273 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.000) 0:01:42.274 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.016) 0:01:42.290 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.030) 0:01:42.321 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.012) 0:01:42.333 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.020) 0:01:42.354 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:49 -0400 (0:00:00.500) 0:01:42.854 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:50-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.324) 0:01:43.179 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.017) 0:01:43.196 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.015) 0:01:43.212 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.016) 0:01:43.229 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.016) 0:01:43.245 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.039) 0:01:43.285 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.019) 0:01:43.304 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.025) 0:01:43.330 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "state": "absent" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.041) 0:01:43.371 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.020) 0:01:43.391 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.025) 0:01:43.417 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.019) 0:01:43.437 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.019) 0:01:43.457 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:50 -0400 (0:00:00.018) 0:01:43.475 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:28:53 -0400 (0:00:02.590) 0:01:46.066 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:28:53 -0400 (0:00:00.014) 0:01:46.081 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:28:53 -0400 (0:00:00.012) 0:01:46.094 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:28:53 -0400 (0:00:00.012) 0:01:46.106 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:28:53 -0400 (0:00:00.023) 0:01:46.130 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:28:53 -0400 (0:00:00.023) 0:01:46.153 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:28:53 -0400 (0:00:00.426) 0:01:46.580 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48234496", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:28:54 -0400 (0:00:00.426) 0:01:47.007 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.239474", "end": "2026-09-10 16:28:54.526673", "rc": 0, "start": "2026-09-10 16:28:54.287199" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:28:54 -0400 (0:00:00.533) 0:01:47.540 **** changed: [managed-node2] => { "__firewall_changed": true, "changed": true, "short_circuit": false } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:28:56 -0400 (0:00:02.195) 0:01:49.736 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:28:56 -0400 (0:00:00.013) 0:01:49.750 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:28:56 -0400 (0:00:00.015) 0:01:49.765 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:28:56 -0400 (0:00:00.012) 0:01:49.777 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:28:56 -0400 (0:00:00.023) 0:01:49.801 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:28:56 -0400 (0:00:00.023) 0:01:49.824 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:57-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if ipsets not removed] ********************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:348 Thursday 10 September 2026 16:28:57 -0400 (0:00:00.311) 0:01:50.136 **** ok: [managed-node2] => (item=customipset-ipv4) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv4\n", "delta": "0:00:00.234586", "end": "2026-09-10 16:28:57.654778", "failed_when_result": false, "item": "customipset-ipv4", "rc": 1, "start": "2026-09-10 16:28:57.420192" } MSG: non-zero return code ok: [managed-node2] => (item=customipset-ipv6) => { "ansible_loop_var": "item", "changed": false, "cmd": "set -euo pipefail\nfirewall-offline-cmd --get-ipsets | grep customipset-ipv6\n", "delta": "0:00:00.234556", "end": "2026-09-10 16:28:58.166673", "failed_when_result": false, "item": "customipset-ipv6", "rc": 1, "start": "2026-09-10 16:28:57.932117" } MSG: non-zero return code TASK [Remove custom ipsets again] ********************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:361 Thursday 10 September 2026 16:28:58 -0400 (0:00:01.050) 0:01:51.187 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:28:58 -0400 (0:00:00.058) 0:01:51.245 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:28:58 -0400 (0:00:00.001) 0:01:51.246 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:28:58 -0400 (0:00:00.023) 0:01:51.269 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:28:58 -0400 (0:00:00.041) 0:01:51.311 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:28:58 -0400 (0:00:00.014) 0:01:51.325 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:28:58 -0400 (0:00:00.019) 0:01:51.344 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:28:58 -0400 (0:00:00.490) 0:01:51.835 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:28:59-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.288) 0:01:52.124 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.016) 0:01:52.140 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.016) 0:01:52.156 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.015) 0:01:52.172 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.015) 0:01:52.188 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.029) 0:01:52.217 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.019) 0:01:52.237 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.025) 0:01:52.262 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "customipset-ipv4", "state": "absent" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv6", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.042) 0:01:52.304 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.021) 0:01:52.325 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.024) 0:01:52.349 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.017) 0:01:52.367 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.015) 0:01:52.382 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:28:59 -0400 (0:00:00.019) 0:01:52.402 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:29:02 -0400 (0:00:02.605) 0:01:55.007 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:29:02 -0400 (0:00:00.014) 0:01:55.022 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:29:02 -0400 (0:00:00.014) 0:01:55.036 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:29:02 -0400 (0:00:00.016) 0:01:55.052 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:29:02 -0400 (0:00:00.029) 0:01:55.082 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:29:02 -0400 (0:00:00.035) 0:01:55.118 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48193536", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:29:02 -0400 (0:00:00.454) 0:01:55.572 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48193536", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:29:03 -0400 (0:00:00.461) 0:01:56.034 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.246403", "end": "2026-09-10 16:29:03.572822", "rc": 0, "start": "2026-09-10 16:29:03.326419" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:29:03 -0400 (0:00:00.554) 0:01:56.588 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.902) 0:01:57.490 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.016) 0:01:57.506 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.019) 0:01:57.526 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.015) 0:01:57.541 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.028) 0:01:57.570 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.026) 0:01:57.596 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:29:04-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if not idempotent] ************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:370 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.301) 0:01:57.897 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is changed", "skip_reason": "Conditional result was False" } TASK [Remove custom ipsets again with previous replaced] *********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:375 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.021) 0:01:57.919 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.051) 0:01:57.970 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:29:04 -0400 (0:00:00.000) 0:01:57.971 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.018) 0:01:57.989 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.034) 0:01:58.024 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.013) 0:01:58.037 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.021) 0:01:58.058 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.493) 0:01:58.552 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:29:05-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.306) 0:01:58.859 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.024) 0:01:58.884 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.025) 0:01:58.910 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.025) 0:01:58.935 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:29:05 -0400 (0:00:00.026) 0:01:58.962 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.102) 0:01:59.065 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.085) 0:01:59.150 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.042) 0:01:59.192 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "previous": "replaced" } } MSG: All assertions passed ok: [managed-node2] => (item=1) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 1, "item": { "ipset": "customipset-ipv4", "state": "absent" } } MSG: All assertions passed ok: [managed-node2] => (item=2) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 2, "item": { "ipset": "customipset-ipv6", "state": "absent" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.063) 0:01:59.256 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.026) 0:01:59.282 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.030) 0:01:59.313 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.022) 0:01:59.335 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.016) 0:01:59.351 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:29:06 -0400 (0:00:00.017) 0:01:59.369 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:29:09 -0400 (0:00:02.603) 0:02:01.973 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:29:09 -0400 (0:00:00.022) 0:02:01.996 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:29:09 -0400 (0:00:00.019) 0:02:02.016 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:29:09 -0400 (0:00:00.019) 0:02:02.036 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:29:09 -0400 (0:00:00.038) 0:02:02.074 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:29:09 -0400 (0:00:00.037) 0:02:02.111 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48193536", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:29:09 -0400 (0:00:00.446) 0:02:02.558 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48193536", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:29:10 -0400 (0:00:00.442) 0:02:03.001 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231700", "end": "2026-09-10 16:29:10.524896", "rc": 0, "start": "2026-09-10 16:29:10.293196" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:29:10 -0400 (0:00:00.538) 0:02:03.540 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:29:11 -0400 (0:00:01.315) 0:02:04.855 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:29:11 -0400 (0:00:00.014) 0:02:04.870 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:29:11 -0400 (0:00:00.015) 0:02:04.886 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:29:11 -0400 (0:00:00.013) 0:02:04.899 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:29:11 -0400 (0:00:00.025) 0:02:04.924 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:29:11 -0400 (0:00:00.023) 0:02:04.948 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:29:12-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } TASK [Fail if not idempotent with previous replaced] *************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:385 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.315) 0:02:05.263 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_result is changed", "skip_reason": "Conditional result was False" } TASK [Test ipset with wrong family (ipv4)] ************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:392 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.016) 0:02:05.279 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.014) 0:02:05.293 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.000) 0:02:05.294 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.016) 0:02:05.310 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.032) 0:02:05.343 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.012) 0:02:05.355 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.018) 0:02:05.374 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:29:12 -0400 (0:00:00.517) 0:02:05.892 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:29:13-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.321) 0:02:06.214 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.025) 0:02:06.239 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.024) 0:02:06.263 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.023) 0:02:06.287 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.024) 0:02:06.311 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.045) 0:02:06.356 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.032) 0:02:06.389 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.029) 0:02:06.418 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "badipset-v4", "ipset_entries": [ "127.0.0.1", "8.8.8.8" ], "ipset_options": { "family": "inet6" }, "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.035) 0:02:06.454 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.022) 0:02:06.477 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.043) 0:02:06.520 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.025) 0:02:06.546 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.019) 0:02:06.566 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:29:13 -0400 (0:00:00.019) 0:02:06.586 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:29:16 -0400 (0:00:02.585) 0:02:09.171 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:29:16 -0400 (0:00:00.016) 0:02:09.188 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:29:16 -0400 (0:00:00.013) 0:02:09.202 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:29:16 -0400 (0:00:00.013) 0:02:09.216 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:29:16 -0400 (0:00:00.024) 0:02:09.241 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:29:16 -0400 (0:00:00.026) 0:02:09.267 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48250880", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:29:16 -0400 (0:00:00.428) 0:02:09.696 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48250880", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:29:17 -0400 (0:00:00.429) 0:02:10.125 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.230253", "end": "2026-09-10 16:29:17.638965", "rc": 0, "start": "2026-09-10 16:29:17.408712" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:29:17 -0400 (0:00:00.532) 0:02:10.658 **** fatal: [managed-node2]: FAILED! => { "changed": false } MSG: ipset badipset-v4: family=inet6 is not supported for IPv4 ipset_entries 127.0.0.1, 8.8.8.8 TASK [Fail if error message is not correct] ************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:408 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.890) 0:02:11.549 **** skipping: [managed-node2] => { "changed": false, "false_condition": "expected_error_message not in ansible_failed_result.msg", "skip_reason": "Conditional result was False" } TASK [Test ipset with wrong family (ipv6)] ************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:419 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.013) 0:02:11.562 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.014) 0:02:11.576 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.000) 0:02:11.577 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.018) 0:02:11.595 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.035) 0:02:11.631 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.013) 0:02:11.644 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:29:18 -0400 (0:00:00.025) 0:02:11.670 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.490) 0:02:12.160 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:29:19-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.294) 0:02:12.455 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.018) 0:02:12.473 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.018) 0:02:12.491 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.017) 0:02:12.509 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.018) 0:02:12.528 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.031) 0:02:12.560 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.022) 0:02:12.582 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.028) 0:02:12.610 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "ipset": "badipset-v6", "ipset_entries": [ "2001:4860:4860::8844", "2001:4860:4860::8888" ], "ipset_options": { "family": "inet" }, "state": "present" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.034) 0:02:12.644 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.022) 0:02:12.667 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.034) 0:02:12.701 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.019) 0:02:12.721 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.016) 0:02:12.738 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:29:19 -0400 (0:00:00.017) 0:02:12.755 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:29:22 -0400 (0:00:02.597) 0:02:15.353 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:29:22 -0400 (0:00:00.015) 0:02:15.368 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:29:22 -0400 (0:00:00.013) 0:02:15.382 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:29:22 -0400 (0:00:00.013) 0:02:15.395 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:29:22 -0400 (0:00:00.024) 0:02:15.420 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:29:22 -0400 (0:00:00.026) 0:02:15.447 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48242688", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:29:22 -0400 (0:00:00.433) 0:02:15.881 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48242688", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:29:23 -0400 (0:00:00.430) 0:02:16.312 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231746", "end": "2026-09-10 16:29:23.825317", "rc": 0, "start": "2026-09-10 16:29:23.593571" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:29:23 -0400 (0:00:00.528) 0:02:16.840 **** fatal: [managed-node2]: FAILED! => { "changed": false } MSG: ipset badipset-v6: family=inet is not supported for IPv6 ipset_entries 2001:4860:4860::8844, 2001:4860:4860::8888 TASK [Fail if error message is not correct] ************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:435 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.887) 0:02:17.728 **** skipping: [managed-node2] => { "changed": false, "false_condition": "expected_error_message not in ansible_failed_result.msg", "skip_reason": "Conditional result was False" } TASK [Cleanup] ***************************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:444 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.013) 0:02:17.741 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml for managed-node2 TASK [Clear facts] ************************************************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:9 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.046) 0:02:17.787 **** META: facts cleared TASK [Run the role] ************************************************************ task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:23 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.000) 0:02:17.788 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__sr_failed_when is defined", "skip_reason": "Conditional result was False" } TASK [Run the role normally] *************************************************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tasks/run_role_with_clear_facts.yml:33 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.017) 0:02:17.805 **** TASK [fedora.linux_system_roles.firewall : Validating arguments against arg spec 'main' - The firewall role.] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/tests/firewall/tests_ipsets.yml:2 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.031) 0:02:17.837 **** ok: [managed-node2] => { "changed": false, "validate_args_context": { "argument_spec_name": "main", "name": "firewall", "path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "type": "role" } } MSG: The arg spec validation passed TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:2 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.013) 0:02:17.850 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Ensure ansible_facts used by role] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:2 Thursday 10 September 2026 16:29:24 -0400 (0:00:00.018) 0:02:17.869 **** ok: [managed-node2] TASK [fedora.linux_system_roles.firewall : Record role begin fingerprint] ****** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:7 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.490) 0:02:18.359 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:29:25-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "begin" } } TASK [fedora.linux_system_roles.firewall : Check if system is ostree] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:20 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.292) 0:02:18.651 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate system is ostree] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:25 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.018) 0:02:18.669 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_ostree is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check if transactional-update exists in /sbin] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:32 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.016) 0:02:18.686 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag if transactional-update exists] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:37 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.016) 0:02:18.702 **** skipping: [managed-node2] => { "changed": false, "false_condition": "not __firewall_is_transactional is defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set platform/version specific variables] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/set_vars.yml:41 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.016) 0:02:18.719 **** skipping: [managed-node2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Validate role parameters] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:5 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.030) 0:02:18.749 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Assert firewall is a list of dicts or a single dict] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:3 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.023) 0:02:18.773 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall dicts contain only valid keys] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:16 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.031) 0:02:18.804 **** ok: [managed-node2] => (item=0) => { "ansible_index_var": "idx", "ansible_loop_var": "item", "changed": false, "idx": 0, "item": { "previous": "replaced" } } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Assert firewall_transactional_update_reboot_ok is null or a boolean] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/assert_role_vars.yml:72 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.031) 0:02:18.835 **** ok: [managed-node2] => { "changed": false } MSG: All assertions passed TASK [fedora.linux_system_roles.firewall : Setup firewalld] ******************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:8 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.021) 0:02:18.857 **** included: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml for managed-node2 TASK [fedora.linux_system_roles.firewall : Run systemctl] ********************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:5 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.024) 0:02:18.881 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Require installed systemd] ********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:13 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.017) 0:02:18.899 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:18 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.016) 0:02:18.915 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_booted is not defined", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Install firewalld] ****************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 Thursday 10 September 2026 16:29:25 -0400 (0:00:00.015) 0:02:18.931 **** ok: [managed-node2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.firewall : Notify user that reboot is needed to apply changes] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:36 Thursday 10 September 2026 16:29:28 -0400 (0:00:02.596) 0:02:21.527 **** skipping: [managed-node2] => { "false_condition": "__firewall_is_transactional | d(false)" } TASK [fedora.linux_system_roles.firewall : Reboot transactional update systems] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:41 Thursday 10 September 2026 16:29:28 -0400 (0:00:00.014) 0:02:21.541 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Fail if reboot is needed and not set] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:46 Thursday 10 September 2026 16:29:28 -0400 (0:00:00.013) 0:02:21.554 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_is_transactional | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Check which conflicting services are enabled] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:11 Thursday 10 September 2026 16:29:28 -0400 (0:00:00.013) 0:02:21.568 **** skipping: [managed-node2] => (item=nftables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=iptables) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item=ufw) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Attempt to stop and disable conflicting services] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:21 Thursday 10 September 2026 16:29:28 -0400 (0:00:00.023) 0:02:21.592 **** skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'nftables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "nftables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'iptables', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "iptables", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => (item={'changed': False, 'skipped': True, 'skip_reason': 'Conditional result was False', 'false_condition': 'firewall_disable_conflicting_services | bool', 'item': 'ufw', 'ansible_loop_var': 'item'}) => { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": { "ansible_loop_var": "item", "changed": false, "false_condition": "firewall_disable_conflicting_services | bool", "item": "ufw", "skip_reason": "Conditional result was False", "skipped": true }, "skip_reason": "Conditional result was False" } skipping: [managed-node2] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.firewall : Unmask firewalld service] *********** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:32 Thursday 10 September 2026 16:29:28 -0400 (0:00:00.025) 0:02:21.617 **** ok: [managed-node2] => { "changed": false, "name": "firewalld", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48238592", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Enable and start firewalld service] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:39 Thursday 10 September 2026 16:29:29 -0400 (0:00:00.435) 0:02:22.053 **** ok: [managed-node2] => { "changed": false, "enabled": true, "name": "firewalld", "state": "started", "status": { "ActiveEnterTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ActiveEnterTimestampMonotonic": "311707414", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "basic.target system.slice dbus.service polkit.service dbus.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Thu 2026-09-10 16:24:25 EDT", "AssertTimestampMonotonic": "311431322", "Before": "multi-user.target network-pre.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedoraproject.FirewallD1", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "yes", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ConditionTimestampMonotonic": "311431321", "ConfigurationDirectoryMode": "0755", "Conflicts": "ip6tables.service ipset.service iptables.service shutdown.target nftables.service ebtables.service", "ControlGroup": "/system.slice/firewalld.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "firewalld - dynamic firewall daemon", "DevicePolicy": "auto", "Documentation": "man:firewalld(1)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/firewalld (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "8892", "ExecMainStartTimestamp": "Thu 2026-09-10 16:24:25 EDT", "ExecMainStartTimestampMonotonic": "311432590", "ExecMainStatus": "0", "ExecReload": "{ path=/bin/kill ; argv[]=/bin/kill -HUP $MAINPID ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStart": "{ path=/usr/sbin/firewalld ; argv[]=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS ; ignore_errors=no ; start_time=[Thu 2026-09-10 16:24:25 EDT] ; stop_time=[n/a] ; pid=8892 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/firewalld.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "firewalld.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu 2026-09-10 16:24:25 EDT", "InactiveExitTimestampMonotonic": "311432634", "InvocationID": "4630a541038c4c99ab1be507fc92b2b4", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "mixed", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "13917", "LimitNPROCSoft": "13917", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "13917", "LimitSIGPENDINGSoft": "13917", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "8892", "MemoryAccounting": "yes", "MemoryCurrent": "48238592", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "firewalld.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice dbus.socket sysinit.target", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "null", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "null", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Thu 2026-09-10 16:24:25 EDT", "StateChangeTimestampMonotonic": "311707414", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "3", "TasksMax": "22268", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "Wants": "network-pre.target", "WatchdogTimestamp": "Thu 2026-09-10 16:24:25 EDT", "WatchdogTimestampMonotonic": "311707412", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.firewall : Check if firewalld is responding to dbus requests] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:46 Thursday 10 September 2026 16:29:29 -0400 (0:00:00.431) 0:02:22.484 **** ok: [managed-node2] => { "attempts": 1, "changed": false, "cmd": [ "firewall-cmd", "--state" ], "delta": "0:00:00.231862", "end": "2026-09-10 16:29:29.998213", "rc": 0, "start": "2026-09-10 16:29:29.766351" } STDOUT: running TASK [fedora.linux_system_roles.firewall : Configure firewall] ***************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 Thursday 10 September 2026 16:29:30 -0400 (0:00:00.528) 0:02:23.013 **** ok: [managed-node2] => { "__firewall_changed": false, "changed": false, "short_circuit": true } TASK [fedora.linux_system_roles.firewall : Show diffs] ************************* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:72 Thursday 10 September 2026 16:29:31 -0400 (0:00:01.311) 0:02:24.324 **** skipping: [managed-node2] => { "false_condition": "ansible_check_mode or ansible_diff_mode or __firewall_test_check_mode | d(false)" } TASK [fedora.linux_system_roles.firewall : Check if short circuit is false] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:82 Thursday 10 September 2026 16:29:31 -0400 (0:00:00.014) 0:02:24.339 **** skipping: [managed-node2] => { "changed": false, "false_condition": "__firewall_debug_short_circuit | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Reset firewall_config] ************** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:93 Thursday 10 September 2026 16:29:31 -0400 (0:00:00.016) 0:02:24.355 **** ok: [managed-node2] => { "ansible_facts": { "firewall_config": {} }, "changed": false } TASK [fedora.linux_system_roles.firewall : Gather firewall config if no arguments] *** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:100 Thursday 10 September 2026 16:29:31 -0400 (0:00:00.013) 0:02:24.369 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Update firewalld_config fact] ******* task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:107 Thursday 10 September 2026 16:29:31 -0400 (0:00:00.025) 0:02:24.394 **** skipping: [managed-node2] => { "changed": false, "false_condition": "firewall_lib_config_list | length == 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.firewall : Record role success fingerprint] **** task path: /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:111 Thursday 10 September 2026 16:29:31 -0400 (0:00:00.024) 0:02:24.418 **** ok: [managed-node2] => { "changed": false, "fingerprint": { "ansible_check_mode": false, "ansible_version": "2.16.19", "date": "2026-09-10T16:29:31-04:00", "managed_node_distro": "CentOS-8", "play_hosts_number": 1, "role_name": "firewall", "role_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall", "status": "success" } } PLAY RECAP ********************************************************************* managed-node2 : ok=318 changed=8 unreachable=0 failed=0 skipped=320 rescued=2 ignored=0 SYSTEM ROLES ERRORS BEGIN v1 [ { "ansible_version": "2.16.19", "end_time": "2026-09-10T20:29:18.576281+00:00Z", "host": "managed-node2", "message": "ipset badipset-v4: family=inet6 is not supported for IPv4 ipset_entries 127.0.0.1, 8.8.8.8", "start_time": "2026-09-10T20:29:17.687952+00:00Z", "task_name": "Configure firewall", "task_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63" }, { "ansible_version": "2.16.19", "end_time": "2026-09-10T20:29:24.755262+00:00Z", "host": "managed-node2", "message": "ipset badipset-v6: family=inet is not supported for IPv6 ipset_entries 2001:4860:4860::8844, 2001:4860:4860::8888", "start_time": "2026-09-10T20:29:23.870670+00:00Z", "task_name": "Configure firewall", "task_path": "/tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63" } ] SYSTEM ROLES ERRORS END v1 TASKS RECAP ******************************************************************** Thursday 10 September 2026 16:29:31 -0400 (0:00:00.293) 0:02:24.711 **** =============================================================================== fedora.linux_system_roles.firewall : Configure firewall ----------------- 3.18s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.78s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.61s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.61s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.61s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.60s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.60s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.60s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.60s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.60s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.60s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Install firewalld ------------------ 2.59s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/firewalld.yml:23 fedora.linux_system_roles.firewall : Configure firewall ----------------- 2.24s /tmp/collections-svG/ansible_collections/fedora/linux_system_roles/roles/firewall/tasks/main.yml:63